How to retrieve hacked account with info changed

Cole Walsh 10 Reputation points
2026-07-18T02:25:10.3333333+00:00

I accedintally did a verification code leading to somone I had been chatting with (have proof) ending up logining into my microsoft account and changing its details including the email password and (number backup I think)

Microsoft Security | Microsoft Identity Manager
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-07-18T02:25:28.9966667+00:00

    Use the Microsoft account Sign-in Helper first. It is the primary recovery path for a hacked Microsoft account and can guide to self-help steps or an agent option.

    If access is still possible anywhere on the account, do this immediately:

    1. Run a full antivirus or malware scan on the PC before changing anything.
    2. Change the password, or reset it if sign-in no longer works.
    3. Check account settings that are commonly changed after compromise, especially connected accounts, forwarding, and automatic replies.
    4. Go to the Security basics page and review Recent activity. For sign-ins that were not authorized, select This wasn't me or Secure your account where shown.

    If sign-in no longer works because the attacker changed the password:

    1. On the sign-in page, select Forgot my password.
    2. Select I think someone else is using my Microsoft account.
    3. Follow the recovery instructions.

    If the account shows "Let's protect your account" or "Help us secure your account", complete the verification prompt using an alternate email address or phone number that is accessible. It does not have to belong to the account owner; it only needs to be reachable to receive the code.

    If two-step verification was turned on and none of the alternate verification methods are accessible, support agents cannot reset the password or change account details. If two-step verification was not turned on and the listed verification options are not recognized, use the Sign-in Helper tool.

    For the recovery form process, a working email account that can be accessed is required so Microsoft can send updates about the request.

    After recovery, add another way to sign in or verify identity in Advanced security options so future recovery is easier.


    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.